Appl. No. 10/667,752 

Amendments to the Specification: 

Please amend the specification of the present application as published (see US 
2004/0230677 Al) as shown below. 

Please amend paragraph [0006] to read as follows: 
[0006] In the scenario of FIG. 1, a network management system 130 monitors and controls 
network 100, over TCP/IP network 128. Network management system 130 is connected to 
networks 100 via a firewall 132 to attempt to prevent unauthorized access to network 
management system 130 from networks 100. Firewall 132 interconnects network management 
system 130 to router 104, switch [116] 106 , firewall 110, switch 112, firewall 116 and switch 
1 18. All communications between network devices to and from firewall 132 and between 
firewall 132 and network management system 130 are through the network TCP/IP ports, the 
same ports that are used for data communication. Thus, communication between network 
management system 130 and any component of network 100 can be initiated from either end. 

Please amend paragraph [0016] to read as follows: 
[0016] Switch 106 is connected to a firewall 1 10, which provides a level of security between 
switch 106 and a second switch 1 12, as is known in the art. Second switch 112 connects DMZ 
computers 114 to external, low security computers 108 and to un-trusted network 102. A second 
firewall 116 provides a second level of security between switch 112 and switch 118. Switch 118 
connects internal, higher security computers 120 to the rest of the network 1 10. As is known in 
the art, firewall 1 16 and firewall 1 10 help to prevent unauthorized access of DMZ computers 1 14 
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and internal, higher security computers 120. At the same time, firewall 1 16 and firewall 1 10 [but] 
allow DMZ computers 114 and internal, higher security computers 120 to access the rest of 
network 100. 

Please amend paragraph [0017] to read as follows: 
[0017] A network management system 130 monitors and controls network 200. Instead of 
firewall 132 (FIG.l), a terminal server 202 interconnects network management system 130 to 
router 104, switch [116] 106, firewall 110, switch 112, firewall 116 and switch 118. Terminal 
server 202 is, according to this exemplary embodiment, connected to serial ports on each of 
router 104, switch 116, firewall 110, switch 112, firewall 116 and switch 118. Thus, 
communication between terminal server 202 and the network devices is not through the same 
port as network communication. 

Please amend paragraph [0022] to read as follows: 
[0022] Using periodic sampling of network device configuration to [checks] check the 
configuration of all network devices against the configuration management database 204 permits 
network management system 130 to check for tampering or unauthorized changes. Further, the 
network management system can monitor and control itself. Periodic sampling of network 
devices provides console log information 206 and central recording of that information. 
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